Digital Asset
Intelligence
Security Incident · Avalanche Ecosystem

Defrost Finance Private Key Leak: $12.17M Reported Loss

·Historical incident record

Incident Overview

On December 23, Defrost Finance V2, the Avalanche ecological native stablecoin project, was attacked by a flash loan, and the hackers made a profit of $173,000. On December 25th, Defrost Finance V1 went wrong again, hackers managed to steal the owner’s key, the protocol was added with fake collateral tokens, and a malicious price oracle was used to liquidate current users, with losses estimated at more than $12 million. On December 27, the hackers who carried out the attack on Defrost Finance V1 have returned the stolen funds.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Nereus

    Attack methodFlash Loan Attack
    Reported loss371,000 USDC
  2. Incident date
    Target

    Platypus

    Attack methodArbitrage attack
    Reported loss$ 50,000
  3. Incident date
    Attack methodOracle Attack
    Reported loss$ 8,300,000
  4. Incident date
    Target

    BitKeep

    Attack methodUnknown
    Reported loss$ 9,000,000
  5. Incident date
    Target

    LastPass

    Attack methodInformation Leakage
    Reported lossNot disclosed